NFA Vulnerability : Check on the MySQL ODBC Connector for CVE-2023-3817, CVE-2023-22102, CVE-2023-6129

Products

• Network Observability

Issue/Introduction

Vulnerability : Check on the MySQL ODBC Connector for CVE-2023-3817, CVE-2023-22102, CVE-2023-6129

Environment

NFA 24.3.5 and above

Cause

Check on the MySQL ODBC Connector for CVE-2023-3817, CVE-2023-22102, CVE-2023-6129 on NFA servers

Resolution

CVE-2023-3817
Known Affected Software Configurations
 cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*
   From (including) 3.0.0    Up to (excluding) 3.0.10

24.3.5 will be shipped with 3.0.13 hence not vulnerable

CVE-2023-22102 
Known Affected Software Configurations
cpe:2.3:a:oracle:mysql_connector\/j:*:*:*:*:*:*:*:*
Up to (including) 8.1.0

24.3.5 will be shipped with JDBC 9.1.0 for mysql java connector hence not vulnerable

CVE-2023-6129
Known Affected Software Configurations
 
cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*
From (including) 3.0.0    Up to (including) 3.0.12
  
cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*
From (including) 3.1.0    Up to (including) 3.1.4

24.3.5 will be shipped with 3.0.13 which is higher than 3.0.12 hence not vulnerable